Common use of Security of Information Clause in Contracts

Security of Information. 29.1 The County is required to notify its customers if any electronically stored information or written document that contains personal information has been subject to a security breach. Any Contractor of the County who becomes aware of any potential breach of a document or electronic file containing personal information of client of the County will immediately notify the Contract Administrator, who will work with the County Public Information Officer to notify the affected persons. A breach occurs when any unauthorized individual or entity gains access to personal information or when unintended disclosure of personal information is made, for example loss or theft of a electronic device containing personal information, loss or theft of a paper document containing personal information, unauthorized access to a network containing personal information, or a document containing personal information being sent to the wrong address. 29.2 No County Contractor will print a person’s full Social Security Number (SSN) on any document that will be sent through the mail, without a written request from the person whose SSN will be printed on the document, except as required by law. The Contractor will use only the last 4 digits of a SSN on all documents unless there is a compelling business reason to use the entire SSN. If a document contains a full SSN, the Contractor will take steps to protect the document from unauthorized disclosure. Contractors will not provide copies of a document containing a full SSN to anyone other than the person whose SSN is listed on the document, except as allowed by State or Federal law. The Contractor may provide a copy of a document to a third party with the SSN redacted if the document is otherwise allowed to be released. No Contractor will publicly post or display a document containing a full SSN. 29.3 Any County Contractor that collects personal information must develop, implement and maintain reasonable safeguards to protect the security and confidentiality of the information. Employees of the Contractor with access to personal information must take reasonable steps to prevent a breach of the information. Reasonable steps include locking file cabinets, monitoring who has access to areas containing personal information, locking computer workstations if leaving the area, and maintaining physical control over files, computer workstations, thumb drives, cds or other media which contains personal information. Contractors must also ensure the proper disposal of documents or other media which contains personal information. Contracting with a document shredding company will be considered proper disposal of paper documents. The Contractor will be responsible for properly disposing of or erasing electronically stored personal information on hard drives, CDs, thumb drives or other devices under their control.

Security of Information. 29.1 28.1 The County is required to notify its customers if any electronically stored information or written document that contains personal information has been subject to a security breach. Any Contractor of the County who becomes aware of any potential breach of a document or electronic file containing personal information of client of the County will immediately notify the Contract Administrator, who will work with the County Public Information Officer to notify the affected persons. A breach occurs when any unauthorized individual or entity gains access to personal information or when unintended disclosure of personal information is made, for example loss or theft of a electronic device containing personal information, loss or theft of a paper document containing personal information, unauthorized access to a network containing personal information, or a document containing personal information being sent to the wrong address.document 29.2 28.2 No County Contractor will print a person’s full Social Security Number (SSN) on any document that will be sent through the mail, without a written request from the person whose SSN will be printed on the document, except as required by law. The Contractor will use only the last 4 digits of a SSN on all documents unless there is a compelling business reason to use the entire SSN. If a document contains a full SSN, the Contractor will take steps to protect the document from unauthorized disclosure. Contractors will not provide copies of a document containing a full SSN to anyone other than the person whose SSN is listed on the document, except as allowed by State or Federal law. The Contractor may provide a copy of a document to a third party with the SSN redacted if the document is otherwise allowed to be released. No Contractor will publicly post or display a document containing a full SSN. 29.3 28.3 Any County Contractor that collects personal information must develop, implement and maintain reasonable safeguards to protect the security and confidentiality of the information. Employees of the Contractor with access to personal information must take reasonable steps to prevent a breach of the information. Reasonable steps include locking file cabinets, monitoring who has access to areas containing personal information, locking computer workstations if leaving the area, and maintaining physical control over files, computer workstations, thumb drives, cds or other media which contains personal information. Contractors must also ensure the proper disposal of documents or other media which contains personal information. Contracting with a document shredding company will be considered proper disposal of paper documents. The Contractor will be responsible for properly disposing of or erasing electronically stored personal information on hard drives, CDs, thumb drives or other devices under their control.

Security of Information. 29.1 30.1 The County is required to notify its customers if any electronically stored information or written document that contains personal information has been subject to a security breach. Any Contractor of the County who becomes aware of any potential breach of a document or electronic file containing personal information of client of the County will immediately notify the Contract Administrator, who will work with the County Public Information Officer to notify the affected persons. A breach occurs when any unauthorized individual or entity gains access to personal information or when unintended disclosure of personal information is made, for example loss or theft of a electronic device containing personal information, loss or theft of a paper document containing personal information, unauthorized access to a network containing personal information, or a document containing personal information being sent to the wrong address. 29.2 30.2 No County Contractor will print a person’s full Social Security Number (SSN) on any document that will be sent through the mail, without a written request from the person whose SSN will be printed on the document, except as required by law. The Contractor will use only the last 4 digits of a SSN on all documents unless there is a compelling business reason to use the entire SSN. If a document contains a full SSN, the Contractor will take steps to protect the document from unauthorized disclosure. Contractors will not provide copies of a document containing a full SSN to anyone other than the person whose SSN is listed on the document, except as allowed by State or Federal law. The Contractor may provide a copy of a document to a third party with the SSN redacted if the document is otherwise allowed to be released. No Contractor will publicly post or display a document containing a full SSN. 29.3 30.3 Any County Contractor that collects personal information must develop, implement and maintain reasonable safeguards to protect the security and confidentiality of the information. Employees of the Contractor with access to personal information must take reasonable steps to prevent a breach of the information. Reasonable steps include locking file cabinets, monitoring who has access to areas containing personal information, locking computer workstations if leaving the area, and maintaining physical control over files, computer workstations, thumb drives, cds or other media which contains personal information. Contractors must also ensure the proper disposal of documents or other media which contains personal information. Contracting with a document shredding company will be considered proper disposal of paper documents. The Contractor will be responsible for properly disposing of or erasing electronically stored personal information on hard drives, CDs, thumb drives or other devices under their control.